CLAIMS: 



1 . A method for secure establishment of a direct communication 
connection between at least a first communication terminal device and a second 

5 communication terminal device, the method comprising: 

providing that the direct communication connection operate according to a 
first communication standard; 

providing a switched communication connection operating according to a 
radio communication standard between the first communication terminal device 
10 and the second communication terminal device; and 

effecting an exchange of keys between the first and second communication 
terminal devices for encrypting data transferred over the direct communication 
connection, wherein the exchange of keys is at least partially performed via the 
switched communication connection. 

15 

2. A method for secure establishment of a direct communication 
connection between at least a first communication terminal device and a second 
communication terminal device as claimed in claim 1 , wherein the radio 
communication standard is a UMTS standard. 

20 

3 . A method for secure establishment of a direct communication 
connection between at least a first communication terminal device and a second 
communication terminal device as claimed in claim 1, further comprising 
transmitting a first message, as a request, from the second communication terminal 

25 device to the first communication terminal device, prior to the exchange of keys, 
wherein the first message contains address information uniquely authenticating the 
second communication terminal device in a network configured according to the 
radio communication standard. 

30 4. A method for secure establishment of a direct communication 

connection between at least a first communication terminal device and a second 
communication terminal device as claimed in claim 3, further comprising: 



10 



transmitting a second message from the first communication terminal device 
to the second communication terminal device via the switched communication 
connection, wherein the second message contains a first key; and 

transmitting a third message from the second communication terminal 
5 device to the first communication terminal device via one of the direct 

communication connection and the switched communication connection, wherein 
the third message contains a second key. 

5. A method for secure establishment of a direct communication 
1 0 connection between at least a first communication terminal device and a second 
communication terminal device as claimed in claim 4, the method further 
comprising: 

transmitting a randomly generated bit sequence, as part of the second 
message, from the first communication device to the second communication device 
1 5 via the switched communication connection; 

encrypting the bit sequence with the first key in the second communication 
terminal device; 

transmitting the encrypted bit sequence, as part of the third message, from 
the second communication terminal device to the first communication terminal 
20 device via one of the direct communication connection and the switched 
communication connection; 

comparing the bit sequence of the second message with the encrypted bit 
sequence of the third message in the first communication terminal device; and 

effecting a data exchange between the first communication terminal device 
25 and the second communication terminal device, if the bit sequence of the second 
message matches the encrypted bit sequence of the third message, via the direct 
communication connection, wherein data originating from the first communication 
terminal device is encrypted with the second key and data originating from the 
second communication device is encrypted with the first key. 

30 
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6. A method for secure establishment of a direct communication 
connection between at least a first communication terminal device and a second 
communication terminal device as claimed in claim 4, wherein the transmission of 
at least one of the second message and the third message operates according to a 

5 standard for short messages transmitted via radio. 

7. A method for secure establishment of a direct communication 
connection between at least a first communication terminal device and a second 
communication terminal device as claimed in claim 5, wherein the transmission of 

10 at least one of the second message and the third message operates according to a 
standard for short messages transmitted via radio. 

8. A method for secure establishment of a direct communication 
connection between at least a first communication terminal device and a second 

1 5 communication terminal device as claimed in claim 4, wherein the transmission of 
at least one of the second message and the third message operates according to a 
standard for transmitting packet data. 

9. A method for secure establishment of a direct communication 
20 connection between at least a first communication terminal device and a second 

communication terminal device as claimed in claim 5, wherein the transmission of 
at least one of the second message and the third message operates according to a 
standard for transmitting packet data. 

25 1 0. A communication terminal device for secure establishment of a 

direct communication connection with a further communication terminal device, 
the direct communication connection operating according to a first communication 
standard, comprising: 

parts for effecting an exchange of keys between the communication terminal 

30 device and the further communication terminal device for encrypting data 
transferred over the direct communication connection; and 
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parts for ensuring that the exchange of keys is at least partially performed 
via a switched communication connection operating according to a radio 
communication standard. 

5 1 1 . A communication terminal device as claimed in claim 1 0, wherein 

the radio communication standard is a UMTS standard. 

12. A communication terminal device as claimed in claim 10, further 
comprising parts for receiving a first message, as a request, transmitted by the 
10 further communication terminal device, the first message containing address 

information uniquely authenticating the second communication terminal device in a 
network configured according to the radio communication standard, and wherein 
the exchange of keys is performed following reception of the first message. 

15 13. A communication terminal device as claimed in claim 12, further 

comprising: 

parts for transmitting a second message containing a first key to the further 
communication terminal device via the switched communication connection; and 

parts for receiving a third message containing a second key transmitted by 
20 the further communication terminal device via one of the direct communication 
connection and the switched communication connection. 

14. A communication terminal device as claimed in claim 13, further 
comprising: 

25 parts for transmitting a randomly generated bit sequence, as part of the 

second message, to the further communication terminal device via the switched 

communication connection; 

parts for receiving a bit sequence, as part of the third message encrypted 

with the first key in the further communication terminal device, transmitted by the 
30 further communication terminal device via one of the direct communication 

connection and the switched communication connection; 
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parts for comparing the bit sequence of the second message with the 
encrypted bit sequence of the third message; and 

parts for effecting a data exchange, if the bit sequence of the second 
message matches the encrypted bit sequence of the third message, between the 
communication terminal device and the further communication terminal device via 
the direct communication connection, wherein data originating from the 
communication terminal device is encrypted with the second key and data 
originating from the further communication terminal device is encrypted with the 
first key. 

15. A communication terminal device as claimed in claim 13, wherein 
the transmission of at least one of the second message and the third message 
operates according to a standard for short messages transmitted via radio. 

16. A communication terminal device as claimed in claim 14, wherein 
the transmission of at least one of the second message and the third message 
operates according to a standard for short messages transmitted via radio. 

17. A communication terminal device as claimed in claim 13, wherein 
20 the transmission of at least one of the second message and the third message 

operates according to a standard for transmitting packet data. 

18. A communication terminal device as claimed in claim 14, wherein 
the transmission of at least one of the second message and the third message 

25 operates according to a standard for transmitting packet data. 
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